By 'zero knowledge' here, I mean a system where only the user can access and decrypt their tokens - not formal cryptographic zero-knowledge proofs.